$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2e22f208-01c0-484e-9e0a-7fcc5b2e3c88.cer File: 2e22f208-01c0-484e-9e0a-7fcc5b2e3c88.cer (raw, json) Hash identifier: g0TNEQbQXG5PH5B36Y7nE8IuvDKo4LlkghEael/SgqU= Subject key identifier: 07:E1:F8:6D:4A:27:DF:09:8F:2B:FA:50:C3:B1:52:4C:2F:85:FB:C9 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584BBCC5729052E7406666DA97A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2e22f208-01c0-484e-9e0a-7fcc5b2e3c88/2e22f208-01c0-484e-9e0a-7fcc5b2e3c88.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2e22f208-01c0-484e-9e0a-7fcc5b2e3c88/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Nov 2025 13:17:30 +0000 Certificate not after: Sun 06 Feb 2028 13:17:30 +0000 Subordinate resources: AS: 401128 IP: 23.179.88.0/24 IP: 2602:f8e1::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:c5:72:90:52:e7:40:66:66:da:97:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Nov 3 13:17:30 2025 GMT Not After : Feb 6 13:17:30 2028 GMT Subject: CN=2e22f208-01c0-484e-9e0a-7fcc5b2e3c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:08:5c:54:e4:bc:85:12:41:8a:56:61:95:b1: 65:c8:8c:23:cf:97:4f:b0:15:c0:8f:09:e1:d7:1a: 15:10:37:2e:c0:3b:aa:a6:dd:a7:7d:53:c6:22:e9: a8:dd:ec:79:55:b3:44:08:e3:43:b3:75:48:dc:30: 97:0f:15:65:3b:4c:ca:ae:3e:30:c0:87:f8:4a:4c: d4:63:e1:67:89:a3:db:a1:74:3a:b4:f7:91:85:03: 8d:03:83:35:4f:c1:7c:be:2b:32:58:1c:aa:71:4a: 5f:9c:c4:12:10:6e:b4:a5:4a:9e:d3:4f:53:1d:b6: 9d:25:a6:62:8f:2a:b1:d3:d9:8d:7b:f6:17:18:ff: 6e:f9:38:3e:f6:57:3d:a9:95:aa:5a:b0:fa:2d:57: 1f:95:b3:fc:f0:38:53:cb:0f:c1:11:2e:d3:30:18: 35:19:01:32:3a:8b:64:1f:f1:9b:b1:ff:a0:7f:66: 9c:e7:ea:24:da:4a:b9:82:9c:ee:8e:7f:9c:44:93: 9c:84:56:51:26:be:4d:b9:e3:b2:88:41:52:9c:23: 80:24:c5:3e:12:12:a8:20:cf:bc:55:22:ae:dc:eb: 2b:99:6d:34:2f:9b:cf:21:8d:71:aa:39:6a:80:d6: a5:54:50:d9:77:63:ee:ea:57:2f:94:1c:ae:0d:c2: a5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E1:F8:6D:4A:27:DF:09:8F:2B:FA:50:C3:B1:52:4C:2F:85:FB:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2e22f208-01c0-484e-9e0a-7fcc5b2e3c88/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2e22f208-01c0-484e-9e0a-7fcc5b2e3c88/2e22f208-01c0-484e-9e0a-7fcc5b2e3c88.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 23.179.88.0/24 IPv6: 2602:f8e1::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:4b:aa:50:0d:fb:33:21:e2:77:90:29:f0:44:01:fe:07:2c: bb:c5:6a:34:f3:47:32:8a:fa:64:8d:27:3c:f5:59:c8:3a:3e: e5:bb:12:6e:d9:5b:55:19:42:c0:0e:4b:bd:2e:c4:03:bb:b6: 11:a7:12:19:2b:9d:5e:0e:0a:f5:2e:92:d6:42:33:4e:2c:2c: 93:cd:85:44:fb:3b:99:d9:0a:b9:d0:f3:6e:6e:5c:8c:f7:dd: ab:0d:b0:64:5f:c5:a0:a4:25:c6:9d:05:b4:4d:77:c8:7c:a7: 3b:46:1d:de:85:ee:aa:5a:6a:55:dc:f6:34:0f:1d:32:a7:49: 81:86:0f:4a:55:44:62:4c:37:05:48:a4:d8:9d:2e:53:75:4f: 5c:21:d0:47:9b:b0:40:56:ac:fd:e6:18:ee:ee:99:7a:f6:3a: ad:cb:3e:b9:bc:b2:bf:75:c3:0c:01:08:df:d8:de:f1:64:c9: f7:f2:2a:a3:2f:09:db:c6:45:cc:b4:c4:a4:61:e8:e1:85:00: 70:d9:6c:82:9d:08:a5:11:0d:58:1a:1f:03:6b:7a:f7:e3:86: cd:fb:6f:b3:90:4f:48:d2:68:a5:34:c8:5d:70:11:cb:1d:3a: b2:64:29:41:fc:d7:1e:66:6c:12:8f:1f:18:b3:f8:b7:f7:7e: 5b:d6:6b:ae -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEu8xXKQUudAZmbal6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTEwMzEzMTczMFoXDTI4MDIwNjEzMTczMFowLzEtMCsGA1UEAxMk MmUyMmYyMDgtMDFjMC00ODRlLTllMGEtN2ZjYzViMmUzYzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAhcVOS8hRJBilZhlbFlyIwjz5dPsBXAjwnh 1xoVEDcuwDuqpt2nfVPGIumo3ex5VbNECONDs3VI3DCXDxVlO0zKrj4wwIf4SkzU Y+FniaPboXQ6tPeRhQONA4M1T8F8visyWByqcUpfnMQSEG60pUqe009THbadJaZi jyqx09mNe/YXGP9u+Tg+9lc9qZWqWrD6LVcflbP88DhTyw/BES7TMBg1GQEyOotk H/Gbsf+gf2ac5+ok2kq5gpzujn+cRJOchFZRJr5NueOyiEFSnCOAJMU+EhKoIM+8 VSKu3OsrmW00L5vPIY1xqjlqgNalVFDZd2Pu6lcvlByuDcKlgQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFAfh+G1KJ98Jjyv6UMOxUkwvhfvJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8y ZTIyZjIwOC0wMWMwLTQ4NGUtOWUwYS03ZmNjNWIyZTNjODgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzJlMjJmMjA4LTAxYzAtNDg0ZS05 ZTBhLTdmY2M1YjJlM2M4OC8yZTIyZjIwOC0wMWMwLTQ4NGUtOWUwYS03ZmNjNWIy ZTNjODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXs1gwDgQCAAIwCAMGACYC+OEAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYe6DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAMS6pQDfszIeJ3kCnwRAH+Byy7 xWo080cyivpkjSc89VnIOj7luxJu2VtVGULADku9LsQDu7YRpxIZK51eDgr1LpLW QjNOLCyTzYVE+zuZ2Qq50PNublyM992rDbBkX8WgpCXGnQW0TXfIfKc7Rh3ehe6q WmpV3PY0Dx0yp0mBhg9KVURiTDcFSKTYnS5TdU9cIdBHm7BAVqz95hju7pl69jqt yz65vLK/dcMMAQjf2N7xZMn38iqjLwnbxkXMtMSkYejhhQBw2WyCnQilEQ1YGh8D a3r344bN+2+zkE9I0milNMhdcBHLHTqyZClB/NceZmwSjx8Ys/i3935b1muu -----END CERTIFICATE-----Generated at Wed Nov 5 09:24:35 2025 by rpki-client